Terms of Service

1. Introduction and Acceptance

Welcome to Kleidi, a self-custody cryptocurrency wallet application operated by Kleidi Wallet, Inc. ("Company," "we," "us," or "our"). By accessing or using the Kleidi application, website, or any related services (collectively, the "Service"), you agree to be bound by these Terms of Service ("Terms").

PLEASE READ THESE TERMS CAREFULLY BEFORE USING THE SERVICE. If you do not agree to all of these Terms, you must not access or use the Service.

These Terms constitute a legally binding agreement between you and the Company. By creating a wallet, connecting your wallet, or otherwise using the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms.

2. Eligibility Requirements

To use the Service, you must:

• Be at least 18 years of age or the age of legal majority in your jurisdiction, whichever is greater.
• Have the legal capacity to enter into a binding agreement and not be barred from doing so under any applicable laws.
• Not be a resident of, or located in, any jurisdiction where the use of cryptocurrency wallets or digital assets is prohibited or restricted.
• Possess the technical knowledge necessary to understand the risks of self-custody wallets, including multisig configurations and timelock mechanisms.

By using the Service, you represent and warrant that you meet all eligibility requirements. If you do not meet these requirements, you must not access or use the Service.

3. Self-Custody and Non-Custodial Nature of Service

Kleidi is a self-custodial (non-custodial) wallet. This means:

• You maintain complete control over your private keys, cryptographic credentials, and digital assets at all times.
• We do not have access to your private keys, recovery phrases, or the ability to move, freeze, or recover your assets.
• We cannot reverse or modify any blockchain transactions on your behalf.
• If you lose access to your wallet credentials (including signer keys for your multisig configuration), your assets may be permanently inaccessible.

The Service provides software tools to help you create, configure, and interact with smart contract wallets on supported blockchain networks. We do not take custody of, or have any control over, your digital assets.

Exception — SEAL Safe Harbor: Notwithstanding the foregoing, the Company has adopted the SEAL Safe Harbor Agreement (see Section 17), under which independent third-party security researchers may, during active exploits only, take protective action with respect to assets held in covered smart contracts. Such actions are not undertaken by the Company, and the Company does not direct, control, or have the ability to initiate such actions.

4. User Responsibilities and Security

You are solely responsible for:

• Securing your private keys and signer wallets. You must keep all private keys, recovery phrases, and access credentials confidential and secure.
• Maintaining proper backups of all wallet credentials and recovery information in secure, offline locations.
• Understanding your wallet configuration, including the implications of your chosen signature threshold, timelock duration, and signer setup.
• Verifying all transaction details before signing, including recipient addresses, amounts, and contract interactions.
• Complying with all applicable laws and regulations in your jurisdiction regarding cryptocurrency ownership, transfer, and taxation.
• Ensuring the security of your devices and network connections when accessing the Service.

You acknowledge that you will not share your private keys or recovery phrases with any third party, including us. We will never ask you for this information.

5. Risk Disclosures

By using the Service, you acknowledge and accept the following risks:

5.1 Blockchain and Smart Contract Risks

• Blockchain transactions are irreversible once confirmed. Errors in transaction details cannot be corrected after execution.
• Smart contracts, including those used by Kleidi wallets, may contain undiscovered vulnerabilities despite audits and testing.
• Blockchain networks may experience congestion, forks, upgrades, or failures that could affect your ability to access or transfer assets.
• Gas fees and network conditions are beyond our control and may significantly impact transaction costs and timing.

5.2 Digital Asset Risks

• Digital asset values are highly volatile and may decrease significantly or become worthless.
• Digital assets may be subject to regulatory changes, restrictions, or prohibitions in various jurisdictions.
• Loss of access to your wallet (through lost keys, compromised signers, or other means) may result in permanent loss of all assets.

5.3 Technical Risks

• Software bugs, hardware failures, or security breaches could result in loss of access to the Service or your assets.
• Third-party services integrated with Kleidi (including RPC providers, block explorers, and DeFi protocols) may experience failures or security incidents.
• Phishing attacks, malware, and social engineering attempts may target users of cryptocurrency applications.

5.4 Timelock-Specific Risks

Kleidi wallets utilize timelock mechanisms that impose mandatory waiting periods before certain transactions can be executed. You acknowledge and accept:

• Funds are not immediately accessible. Even in emergency situations, you cannot bypass the timelock delay you have configured. If you need immediate access to funds, they will not be available until the timelock period expires.
• Misconfigured timelocks can lock funds for extended periods. If you set an excessively long timelock duration (days, weeks, or longer), you will be unable to access those funds until the period expires. We cannot override or shorten timelock periods.
• Medical emergencies, market volatility, or urgent needs do not constitute grounds for bypassing timelock restrictions. The timelock operates as programmed regardless of circumstances.
• You are solely responsible for choosing an appropriate timelock duration that balances security with your liquidity needs.

6. Prohibited Uses and Geographic Restrictions

You agree not to use the Service for:

• Any unlawful purpose or in violation of any applicable laws, regulations, or sanctions programs (including OFAC).
• Money laundering, terrorist financing, or other financial crimes.
• Circumventing any legal restrictions on cryptocurrency transactions in your jurisdiction.
• Attempting to interfere with, compromise, or disrupt the Service or its underlying infrastructure.
• Misrepresenting your identity or affiliation with any person or entity.
• Any activity that could harm, disable, or impair the Service or other users.

6.1 OFAC-Restricted Jurisdictions

The Service is not available to, and may not be used by, residents of or persons located in jurisdictions subject to comprehensive sanctions by the U.S. Office of Foreign Assets Control (OFAC). As of the date of these Terms, these include:

• Cuba
• Iran
• North Korea (Democratic People's Republic of Korea)
• Syria
• The Crimea, Donetsk, and Luhansk regions of Ukraine
• Russia (subject to evolving restrictions)

This list is not exhaustive and may change. You are responsible for ensuring that your use of the Service complies with all applicable sanctions laws and regulations. We reserve the right to restrict access to the Service from any jurisdiction at any time.

By using the Service, you represent and warrant that you are not (i) located in, ordinarily resident in, or organized under the laws of any jurisdiction subject to comprehensive OFAC sanctions, (ii) identified on any sanctions list maintained by OFAC, the United Nations, the European Union, or the United Kingdom, or (iii) owned or controlled by any such person or entity.

7. Intellectual Property

The Service, including its design, features, and content (excluding user-generated content and open-source components), is owned by the Company and protected by intellectual property laws. The Kleidi name, logo, and associated trademarks are our property.

Certain components of the Service may be provided under open-source licenses. Your use of such components is governed by the applicable open-source license terms.

8. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED.

To the fullest extent permitted by law, we disclaim all warranties, including but not limited to:

• Implied warranties of merchantability, fitness for a particular purpose, and non-infringement.
• Any warranty that the Service will be uninterrupted, error-free, secure, or free from viruses or other harmful components.
• Any warranty regarding the accuracy, reliability, or completeness of any information provided through the Service.
• Any warranty regarding the security or functionality of underlying blockchain networks or smart contracts.

9. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL THE COMPANY, ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO:

• Loss of profits, revenue, or data
• Loss of digital assets, including due to user error, security breaches, or smart contract vulnerabilities
• Business interruption or loss of goodwill
• Any damages arising from your use of or inability to use the Service

Our total aggregate liability for any claims arising under these Terms shall not exceed the greater of (a) the amount you paid to us for the Service in the twelve (12) months preceding the claim, or (b) one hundred U.S. dollars ($100).

10. Indemnification

You agree to indemnify, defend, and hold harmless the Company and its officers, directors, employees, agents, and affiliates from any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from your use of the Service, your violation of these Terms, or your violation of any rights of any third party.

11. Modifications to Terms

We reserve the right to modify these Terms at any time. We will provide notice of material changes by updating the "Last Updated" date at the top of this page and, where appropriate, providing additional notice through the Service.

Your continued use of the Service after any modifications constitutes acceptance of the updated Terms. If you do not agree to the modified Terms, you must stop using the Service.

12. Termination

You may stop using the Service at any time. Because Kleidi is a self-custody solution, termination does not affect your access to your digital assets—you retain full control through your private keys and can interact with your wallet using other compatible interfaces.

We reserve the right to suspend or terminate access to the Service for any user who violates these Terms or engages in prohibited conduct.

13. Governing Law and Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law principles.

Any dispute arising from or relating to these Terms or the Service shall be resolved through binding arbitration in accordance with the rules of the American Arbitration Association. The arbitration shall take place in Wilmington, Delaware, and the arbitrator's decision shall be final and binding.

CLASS ACTION WAIVER: You agree to resolve any disputes on an individual basis and waive any right to participate in class action lawsuits or class-wide arbitration.

SEAL Safe Harbor Disputes: Notwithstanding the foregoing, disputes arising under or relating to the SEAL Safe Harbor Agreement referenced in Section 17 — including disputes regarding Whitehat eligibility, compliance with rescue procedures, or the return of rescued Tokens — shall be resolved in accordance with the dispute resolution provisions of the Whitehat Agreement, to the extent such provisions conflict with this Section 13.

14. Force Majeure

We shall not be liable for any failure or delay in performing our obligations under these Terms where such failure or delay results from any cause beyond our reasonable control, including but not limited to:

• Acts of God, natural disasters, earthquakes, floods, fires, or severe weather events
• Epidemics, pandemics, or public health emergencies
• Wars, acts of terrorism, civil unrest, riots, or armed conflict
• Government actions, laws, regulations, embargoes, or sanctions
• Failures of third-party infrastructure, including blockchain networks, internet service providers, or cloud hosting services
• Cyberattacks, including DDoS attacks, hacking, or network intrusions affecting the Service or its dependencies
• Power outages or telecommunications failures
• Labor disputes or strikes

In the event of a force majeure, our obligations under these Terms will be suspended for the duration of the event. We will use reasonable efforts to mitigate the effects and resume normal operations as soon as practicable.

15. Privacy and Data Practices

Your privacy is important to us. Our collection and use of personal information is governed by our Privacy Policy, which is incorporated into these Terms by reference.

Key points:

• Self-custody means limited data collection. Because Kleidi is a self-custody wallet, we do not collect or store your private keys, recovery phrases, or wallet contents.
• Blockchain data is public. Transactions you execute through your wallet are recorded on public blockchain networks and are visible to anyone.
• Service improvement data. We may collect anonymized usage data to improve the Service, diagnose technical issues, and enhance security.
• Third-party services. The Service may integrate with third-party providers (RPC nodes, block explorers, DeFi protocols) that have their own privacy policies.

By using the Service, you acknowledge that you have read and understand our data practices as described above and in our Privacy Policy.

16. Miscellaneous

• Entire Agreement: These Terms constitute the entire agreement between you and the Company regarding the Service.
• Severability: If any provision of these Terms is found unenforceable, the remaining provisions shall continue in effect.
• Waiver: Our failure to enforce any provision of these Terms shall not constitute a waiver of that provision.
• Assignment: You may not assign your rights under these Terms without our consent. We may assign our rights without restriction.

17. SEAL Safe Harbor Agreement for Whitehats

The Company has adopted the SEAL Safe Harbor Agreement for Whitehats, a legal and technical framework that empowers approved security researchers ("Whitehats") to intervene during active exploits to rescue user funds.

17.1 User Consent to Eligible Funds Rescues

By using the Service, you hereby acknowledge and agree to, and consent to be bound by the terms and conditions of, the Safe Harbor Agreement for Whitehats adopted by the Company (the "Whitehat Agreement"). Without limiting the generality of the foregoing:

• You hereby consent to Whitehats attempting Eligible Funds Rescues of any and all Tokens held in covered smart contracts (as defined in Section 17.2), and the deduction of Bounties out of your Tokens to compensate Eligible Whitehats for successful Eligible Funds Rescues.
• You acknowledge that the Bounty payable to Eligible Whitehats is up to 10% of rescued Tokens, subject to a maximum cap as specified in the Whitehat Agreement. You consent to such Bounty being deducted from your rescued Tokens before they are returned to you.
• You acknowledge and agree that Tokens may be lost, stolen, suffer diminished value, or become disabled or frozen in connection with attempts at Eligible Funds Rescues, and you assume all the risk of the foregoing.
• You acknowledge that during an Eligible Funds Rescue, your Tokens may be temporarily held by the Eligible Whitehat for up to seventy-two (72) hours before being returned to the designated recovery address. During this period, you will not have access to or control over the rescued Tokens.
• You acknowledge and agree that payment of the Bounty as a deduction from your Tokens to an Eligible Whitehat is likely to constitute a taxable disposition by you of the deducted Tokens in certain jurisdictions. You are solely responsible for determining the tax implications of any Eligible Funds Rescue and for satisfying any tax obligations arising therefrom.
• You agree to hold other users of the Service (and any other Protocol Community Members as defined in the Whitehat Agreement) harmless from any loss, liability, or other damages suffered by you in connection with attempted Eligible Funds Rescues under the Whitehat Agreement.
• You agree to indemnify and hold Kleidi Wallet, Inc. harmless from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to the recovery of your funds by Eligible Whitehats and the payment of Bounties to such Whitehats, in accordance with the Company's adoption of the SEAL Safe Harbor Agreement.

For the avoidance of doubt, nothing in this Section 17 shall be deemed to limit any rights or remedies you may have against an Eligible Whitehat who fails to comply with the terms of the Whitehat Agreement, including the obligation to return rescued Tokens within the specified timeframe. The Company will use commercially reasonable efforts to notify you if an Eligible Funds Rescue affecting your Tokens is initiated, subject to the Company's ability to do so given the circumstances of the exploit.

17.2 Definitions and Scope

Capitalized terms used in this Section 17 that are not otherwise defined in these Terms (including "Eligible Funds Rescue," "Tokens," "Bounty," and "Eligible Whitehat") shall have the meanings ascribed to them in the Whitehat Agreement.

The "designated recovery address" referenced in Section 17.1 is the address specified in the Company's on-chain SEAL Safe Harbor Registry entry to which rescued Tokens are returned. The Company does not take custody of rescued Tokens at any point during or after an Eligible Funds Rescue.

For purposes of this Section 17, "covered smart contracts" means the Kleidi timelock module contracts, the Gnosis Safe multisig contracts deployed through the Service, and any associated infrastructure contracts. Tokens held in third-party DeFi protocols accessed through the Service (such as Moonwell and Morpho) are covered only insofar as an Eligible Funds Rescue requires interaction with such protocols to protect Tokens originating from a covered smart contract (see Section 17.5).

17.3 Whitehat Agreement Reference and On-Chain Registration

The full text of the SEAL Safe Harbor Agreement for Whitehats is available at this IPFS link. The Company's adoption is registered on-chain via the SEAL Safe Harbor Registry and is independently verifiable. The scope of covered contracts is defined in the on-chain registration.

In the event of any conflict between this Section 17 and the Whitehat Agreement, the Whitehat Agreement shall control. If the Whitehat Agreement is updated, the Company will update this Section 17 and the "Last Updated" date of these Terms accordingly. The version of the Whitehat Agreement applicable to you is the version referenced at the time you last accepted these Terms.

17.4 Timelock-Specific Provisions

You acknowledge that the Service employs timelock mechanisms that impose mandatory waiting periods before certain transactions are executed. These timelock periods may create windows during which Eligible Whitehats can intervene to rescue funds. Eligible Funds Rescues may include, without limitation:

• Cancellation of queued malicious or unauthorized transactions during the timelock delay period.
• Execution of protective transactions to move Tokens to a designated recovery address before a malicious transaction is finalized.
• Emergency actions through recovery or guardian mechanisms associated with your wallet.

You consent to such interventions and acknowledge that they may result in the cancellation or modification of transactions you have initiated, including legitimate transactions that may be indistinguishable from malicious activity during an active exploit.

17.5 DeFi Protocol Interactions

You acknowledge that the Service integrates with third-party DeFi protocols, including but not limited to Moonwell and Morpho. Eligible Funds Rescues may involve the unwinding, withdrawal, or modification of positions you hold in such third-party protocols. You acknowledge that such actions may result in:

• Realized losses on lending or staking positions.
• Liquidation of collateral positions or forfeiture of accrued yield.
• Other adverse financial consequences arising from the emergency nature of the rescue.

The Company makes no representation that Eligible Funds Rescues will preserve the value or structure of your DeFi positions. Where third-party protocols have adopted their own Safe Harbor agreements, such agreements shall govern rescues conducted within those protocols' smart contracts, and this Section 17 shall govern rescues conducted through the Service's own covered smart contracts.

18. Contact Information

For questions about these Terms of Service, please contact Kleidi Wallet, Inc. through the official channels listed on our website.